Malicious code in project-ykhjj-papa (npm)

The package project-ykhjj-papa was found to contain malicious code...

MAL-2025-13924 Malicious code in a-vailable-al-bum-file-32170-electro-glide-in-blue-fzp30-hsjmrf (npm)

The package a-vailable-al-bum-file-32170-electro-glide-in-blue-fzp30-hsjmrf was found to contain malicious code...

MAL-2025-8481 Malicious code in @malware-test-baler-foils-vibex-tynes/test-mlw3-baler-foils-vibex-tynes (npm)

The package @malware-test-baler-foils-vibex-tynes/test-mlw3-baler-foils-vibex-tynes was found to contain malicious code...

MAL-2025-39819 Malicious code in xigua-iceberg-69im (npm)

The package xigua-iceberg-69im was found to contain malicious code...

MAL-2025-9824 Malicious code in @zalastax/nolb-_bid (npm)

The package @zalastax/nolb-bid was found to contain malicious code...

MAL-2025-21154 Malicious code in galenjiangfirtcommit (npm)

The package galenjiangfirtcommit was found to contain malicious code...

VulnCheck KEV: CVE-2000-0984

The HTTP server in Cisco IOS 12.0 through 12.1 allows local users to cause a denial of service crash and reload via a URL containing a "?/" string...

CVE-2024-42392 Improper Neutralization of Delimiters in Mongoose Web Server library

Improper Neutralization of Delimiters vulnerability in Cesanta Mongoose Web Server v7.14 allows to trigger an infinite loop bug if the input string contains unexpected characters...

Cosmos: Heap-Buffer-Overread in contains_whitespace when calling parser_validate after supplying a maliciously crafted buffer to parser_parse

A heap-buffer-overread vulnerability was discovered in the containswhitespace function when calling parservalidate after supplying a maliciously crafted buffer to parserparse. The vulnerability was not exploitable in the primary use case of the library, but a length check was added to prevent thi...

RLSA-2024:7463 Important: cups-filters security update

The cups-filters package contains back ends, filters, and other software that was once part of the core Common UNIX Printing System CUPS distribution but is now maintained independently. Security Fixes: cups-browsed: cups-browsed binds on UDP INADDRANY:631 trusting any packet from any source...

SUSE CVE-2007-5925

The convertsearchmodetoinnobase function in hainnodb.cc in the InnoDB engine in MySQL 5.1.23-BK and earlier allows remote authenticated users to cause a denial of service database crash via a certain CONTAINS operation on an indexed column, which triggers an assertion error...

SUSE CVE-2010-1163

The command matching functionality in sudo 1.6.8 through 1.7.2p5 does not properly handle when a file in the current working directory has the same name as a pseudo-command in the sudoers file and the PATH contains an entry for ".", which allows local users to execute arbitrary commands via a...

turismo.jardinopolis.sc.gov.br Cross Site Scripting vulnerability OBB-3099018

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

jaguar-etype.nl Cross Site Scripting vulnerability OBB-3067160

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2022-28288 · Ransack +2 · Ransack +2

Name of the Vulnerable Software and Affected Versions: pageflow versions prior to 14.5.2 pageflow versions prior to 15.7.1 Description: The issue allows attackers to extract sensitive properties of database objects associated with users or entries belonging to an account they have access to. This...

vamoscycling.com Cross Site Scripting vulnerability OBB-2620156

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

cheminsdetravers.fr Cross Site Scripting vulnerability OBB-2444942

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

zeitarbeit-jobs-sachsen.de Cross Site Scripting vulnerability OBB-2326152

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Psyprax Security Vulnerability

A security vulnerability exists in Psyprax before 3.2.2 that stems from the file %PROGRAMDATA%Psyprax32PPScreen.ini containing the application lock screen hash. If this entry is removed, the lock screen will no longer be displayed...

shivanandavidyalaya.org Cross Site Scripting vulnerability OBB-1253609

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...